Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: JauO40thTXTC3Ta6Kfzw7G2Vj7Cpi8z7NW9gLe/bmXk=
Subject key identifier: 01:A7:EC:AA:63:A4:CD:C6:10:9F:CD:A6:A6:D1:AD:A1:27:E3:AA:62
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 019923A0E11C89999A3DB82A22B11A0E0ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 0E71
Signing time: Sun 07 Sep 2025 10:02:49 +0000
Manifest this update: Sun 07 Sep 2025 10:02:49 +0000
Manifest next update: Mon 08 Sep 2025 10:02:49 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: QYBNXe8wnq/cEyxODBmUMgNWcJ7uaNy2ZkaDsG/gAS8=)
2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e1:1c:89:99:9a:3d:b8:2a:22:b1:1a:0e:0a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Sep 7 10:02:49 2025 GMT
Not After : Sep 8 10:02:49 2025 GMT
Subject: CN=01a7ecaa63a4cdc6109fcda6a6d1ada127e3aa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:ac:1d:84:5f:fa:c1:1a:c7:4e:75:85:fe:
54:1c:dc:d3:83:0a:bf:33:d3:fb:90:e3:3b:56:ff:
5e:8a:97:3f:9d:37:58:de:28:96:af:e0:ac:14:35:
f9:59:78:b9:28:10:68:70:22:29:0c:a0:f3:20:12:
ce:e8:34:38:ca:d7:b9:14:aa:10:24:f6:b9:7c:44:
1f:44:01:16:a1:e2:dc:54:09:9d:30:59:59:f7:b6:
c2:16:e6:55:5c:8f:0e:e8:2a:8b:d9:03:2d:08:f1:
cc:c6:8b:3c:36:ea:14:05:2c:64:14:65:ed:f8:b8:
c0:f4:fa:e5:9d:49:a8:de:6b:74:dd:b6:5f:3e:af:
5f:dc:34:5b:f7:1a:1a:56:5a:00:63:ac:34:16:db:
1f:67:de:02:a7:2f:49:71:56:b5:4b:3d:22:17:b3:
44:8d:e7:26:aa:b2:e7:8a:92:0d:ab:5a:7d:dd:06:
9c:0c:15:a4:21:7e:1e:b4:22:c6:93:78:0b:49:15:
67:35:4c:09:10:d7:82:d4:e6:25:5b:f1:a5:23:8e:
c5:bd:61:01:7c:e1:3b:f0:9c:36:d0:4b:06:4c:76:
e8:9a:62:a4:f2:ee:69:6f:68:d9:7a:f1:7a:1b:8c:
ed:bb:61:cb:55:40:7f:18:26:83:08:ad:62:48:46:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A7:EC:AA:63:A4:CD:C6:10:9F:CD:A6:A6:D1:AD:A1:27:E3:AA:62
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:d8:3c:18:c7:c1:0e:9d:82:2e:b0:8e:ef:29:34:c3:06:56:
b7:9d:f1:fa:1b:a3:f9:b1:36:05:4d:66:23:8b:af:94:19:40:
e2:95:b0:ab:98:a0:47:2e:d6:be:34:a6:6d:5f:7e:6a:01:42:
b9:e9:c8:27:03:9a:31:11:a6:77:c1:c5:6b:4b:98:79:76:36:
0a:08:99:fe:b1:98:63:2e:89:b1:c6:8c:18:17:ad:b1:72:28:
6c:de:42:4b:dc:1a:60:9c:e1:38:3c:90:ea:17:b8:88:07:b8:
bb:1b:0b:85:9b:84:19:da:d4:ad:af:39:60:43:bb:eb:6b:32:
70:82:be:cd:f2:90:6d:88:36:4a:24:18:7d:fb:dc:a8:ac:63:
56:61:99:23:f6:34:f5:cf:e1:c4:57:7d:c4:c5:ab:b4:99:3f:
2b:4d:35:71:f7:7b:07:38:50:ee:ee:97:73:30:f3:c8:73:01:
4f:c9:a4:21:ad:a5:81:8d:52:46:26:3a:65:04:e6:df:cf:aa:
50:1e:be:19:65:61:9d:23:e2:e6:d1:21:62:8e:ac:88:44:34:
94:e9:99:7b:2e:12:7c:fc:e6:55:65:a9:ba:bd:d1:ce:4d:ac:
c4:8f:e3:9f:64:9c:04:7d:02:b3:ba:ae:f9:18:dd:93:32:6b:
3e:51:5b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoOEciZmaPbgqIrEaDgrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmY3MGMwZWMyMTAxMGRiZDZmZTkxNWYzMzI2MzAwZmUz
MTRiMjMwHhcNMjUwOTA3MTAwMjQ5WhcNMjUwOTA4MTAwMjQ5WjAzMTEwLwYDVQQD
EygwMWE3ZWNhYTYzYTRjZGM2MTA5ZmNkYTZhNmQxYWRhMTI3ZTNhYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oKsHYRf+sEax051hf5UHNzTgwq/
M9P7kOM7Vv9eipc/nTdY3iiWr+CsFDX5WXi5KBBocCIpDKDzIBLO6DQ4yte5FKoQ
JPa5fEQfRAEWoeLcVAmdMFlZ97bCFuZVXI8O6CqL2QMtCPHMxos8NuoUBSxkFGXt
+LjA9PrlnUmo3mt03bZfPq9f3DRb9xoaVloAY6w0FtsfZ94Cpy9JcVa1Sz0iF7NE
jecmqrLnipINq1p93QacDBWkIX4etCLGk3gLSRVnNUwJENeC1OYlW/GlI47FvWEB
fOE78Jw20EsGTHbommKk8u5pb2jZevF6G4ztu2HLVUB/GCaDCK1iSEYA2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGn7KpjpM3GEJ/NpqbRraEn46piMB8GA1UdIwQY
MBaAFIUvcMDsIQENvW/pFfMyYwD+MUsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jNGYwY2YtNzgyZC00Y2I0LTkyNWYt
ZmIyMzVhZmY0NjE4LzEvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jNGYwY2YtNzgyZC00Y2I0LTkyNWYtZmIyMzVhZmY0NjE4
LzEvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxdg8GMfB
Dp2CLrCO7yk0wwZWt53x+huj+bE2BU1mI4uvlBlA4pWwq5igRy7WvjSmbV9+agFC
uenIJwOaMRGmd8HFa0uYeXY2CgiZ/rGYYy6JscaMGBetsXIobN5CS9waYJzhODyQ
6he4iAe4uxsLhZuEGdrUra85YEO762sycIK+zfKQbYg2SiQYffvcqKxjVmGZI/Y0
9c/hxFd9xMWrtJk/K001cfd7BzhQ7u6XczDzyHMBT8mkIa2lgY1SRiY6ZQTm38+q
UB6+GWVhnSPi5tEhYo6siEQ0lOmZey4SfPzmVWWpur3Rzk2sxI/jn2ScBH0Cs7qu
+RjdkzJrPlFbNw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:05 2025 by rpki-client